Inthe Developer Prole, on the server side, the Enterprise Server uses the JSSE format,
whichuses keytool to manage certicates and key stores. In the Clusters and Enterprise
Prole,on the server side, the Enterprise Server uses NSS, which uses certutil to manage
theNSS database which stores private keys and certicates. In both proles, the client side
(appclientor stand-alone), uses the JSSE format.
Bydefault, the Enterprise Server is congured with a keystore and truststore that will work
withthe example applications and for development purposes. For production purposes, you
maywish to change the certicate alias, add other certicates to the truststore, or change the
nameand/or location of the keystore and truststore les.

Changing the Locationof Cer ticateFiles

Thekeystore and truststore les provided for development are stored in the domain-dir/config
directory.
Usethe Admin Console to add or modify the value eld for the new location of the certicate
les.
-Dcom.sun.appserv.nss.db=${com.sun.aas.instanceRoot}/NSS-database-directory
whereNSS-database-directory is the location of the NSS database.
Using JavaSecure Socket Extension (JSSE) Tools
Usekeytool to set up and work with JSSE (Java Secure Socket Extension) digital certicates. In
theDeveloper Prole, the Enterprise Server uses the JSSE format on the server side to manage
certicatesand key stores. In all the proles, the client side (appclient or stand-alone) uses the
JSSEformat.
TheJ2SE SDK ships with keytool, which enables the administrator to administer
public/privatekey pairs and associated certicates. It also enables users to cache the public keys
(inthe form of certicates) of their communicating peers.
Torun keytool, the shell environment must be congured so that the J2SE /bin directory is in
thepath, or the full path to the tool must be present on the command line. For more
informationon keytool, see the keytool documentation at
http://java.sun.com/j2se/1.5.0/docs/tooldocs/solaris/keytool.html.

Usingthe keytool Utility

Thefollowing examples demonstrate usage related to certicate handling using JSSE tools:
UsingJavaSecure Socket Ex tension( JSSE)Tools
SunGlassFishEnterprise Ser ver2.1 Administration Guide • December 2008112